Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft
File: W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft (raw, json)
Hash identifier: bgD1viGooZ1QPHtNCWEncLthqToDh/jjkdsVlIhUH+c=
Subject key identifier: 33:AF:2A:85:96:09:83:86:A6:07:E7:AE:2E:98:9C:51:6A:1F:B0:F8
Authority key identifier: 5B:9A:40:FC:3F:35:0A:BD:A5:9D:BF:C0:1C:A3:7A:46:D8:D7:47:64
Certificate issuer: /CN=5b9a40fc3f350abda59dbfc01ca37a46d8d74764
Certificate serial: 01A12767E60FE0F07E81EDBE78B528FF2B6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft
Manifest number: 1AA0
Signing time: Sat 10 Oct 2026 20:01:22 +0000
Manifest this update: Sat 10 Oct 2026 20:01:22 +0000
Manifest next update: Sun 11 Oct 2026 20:01:22 +0000
Files and hashes: 1: IzGe4nosNG0zHmK5OPSn9wIvv8k.roa (hash: wsQqoFWRb3dC2K9IWt3QbIKDbjr74CKWRJK6ESBk9b4=)
2: W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl (hash: +yez+UKm1N68URAxmTsQ8zAhw+hBbYaG8Qjkz6T2KfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:67:e6:0f:e0:f0:7e:81:ed:be:78:b5:28:ff:2b:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b9a40fc3f350abda59dbfc01ca37a46d8d74764
Validity
Not Before: Oct 10 20:01:22 2026 GMT
Not After : Oct 11 20:01:22 2026 GMT
Subject: CN=33af2a8596098386a607e7ae2e989c516a1fb0f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b2:44:91:25:12:be:f9:9a:8f:68:3e:6c:63:
62:43:93:ad:b3:fe:c3:6b:17:d0:7c:10:ca:60:dd:
8f:57:1a:9b:d4:b4:8b:bb:14:af:8a:51:0d:49:68:
2b:44:65:a5:65:b6:b9:36:19:b0:65:7d:2e:71:df:
74:82:7a:35:31:68:0b:d8:ec:31:6a:ad:35:06:dc:
9c:6f:49:15:2b:83:8b:e6:a7:77:11:03:02:4f:ec:
c5:aa:0e:fb:ed:c6:95:17:fa:99:b9:1e:bf:ef:ec:
67:1c:42:c7:fb:5d:08:70:09:d4:68:88:3a:16:38:
3c:a3:69:99:bd:50:d8:23:58:09:c8:1f:a8:31:90:
20:0e:59:60:eb:cd:df:13:f6:d6:b7:53:27:77:e5:
ba:ad:3e:7c:4e:18:4d:9b:39:95:1d:fd:3f:79:3d:
46:b0:f8:aa:de:a5:92:7d:97:1e:63:6a:6f:da:3c:
a2:89:45:09:82:1d:18:3a:ab:a3:4d:49:79:6e:9c:
09:cb:ab:11:3f:e2:90:05:20:ce:30:de:72:3d:d1:
5a:be:f2:b0:9e:03:1d:c8:1e:e6:04:1f:f9:6a:53:
bb:6c:94:c9:44:53:89:93:e2:78:2a:87:41:0a:87:
a6:d6:76:4d:87:3d:12:50:22:3b:69:82:03:38:ae:
67:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AF:2A:85:96:09:83:86:A6:07:E7:AE:2E:98:9C:51:6A:1F:B0:F8
X509v3 Authority Key Identifier:
keyid:5B:9A:40:FC:3F:35:0A:BD:A5:9D:BF:C0:1C:A3:7A:46:D8:D7:47:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:cd:c9:87:4a:fe:dc:c4:8f:9e:d8:66:be:1d:97:47:94:79:
dc:0b:80:6c:15:48:5a:84:af:37:f7:39:0d:63:75:2e:1d:59:
12:ea:9e:3f:7a:00:02:01:49:64:e0:0d:e6:d8:6a:c1:e1:3f:
cb:11:8c:57:f1:95:c9:9d:eb:a6:8c:f5:6b:df:da:81:7b:f5:
4c:19:2c:cc:18:2a:07:89:d7:6d:b1:f0:0a:82:ad:d4:03:81:
85:dd:26:7d:3b:30:3d:98:97:96:59:82:98:d3:bf:0b:05:2c:
27:91:2d:30:de:bf:05:c1:ac:1d:fa:6f:08:41:a6:ed:63:5f:
42:7a:36:37:48:15:71:89:6d:a5:42:0b:a9:bf:5b:25:0c:e3:
2a:73:1c:74:a6:af:5a:b8:69:2f:8f:39:b8:e1:c3:12:2b:fa:
42:a7:95:dd:28:a0:ed:fc:9f:7f:3e:3b:eb:35:4b:5f:ce:d6:
f1:01:f1:13:fc:7b:78:69:ba:81:91:c7:77:3d:55:66:cb:9b:
c6:45:b0:b0:27:65:84:bf:9e:de:e5:f4:c1:81:f7:48:7b:93:
62:ef:cc:9f:5b:66:1e:32:ea:64:be:40:73:fd:42:16:f7:ed:
51:11:87:c9:1b:78:c6:cd:44:ca:6e:ab:b8:98:63:6c:d9:e3:
b7:ba:57:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:30:22 2026 by rpki-client